Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262231.roa
File:                     AS262231.roa (raw, json)
Hash identifier:          SA4OtA52ndTYIGSNjViQ4lhhDUlnJNe7w/nLeRZk9DY=
Subject key identifier:   AF:B6:D9:8B:07:5B:42:03:AC:9F:4B:D7:55:91:80:BA:11:7E:34:ED
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       1FEE5F872E4B1027095DC5EFBDF50A38AA1F3A49
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262231.roa
Signing time:             Wed 30 Sep 2026 17:37:31 +0000
ROA not before:           Wed 30 Sep 2026 17:32:31 +0000
ROA not after:            Wed 29 Sep 2027 17:37:31 +0000
asID:                     262231
IP address blocks:        186.38.37.0/24 maxlen: 24
                          186.38.105.0/24 maxlen: 24
                          186.56.67.128/25 maxlen: 25
                          186.56.97.0/24 maxlen: 24
                          201.251.48.0/24 maxlen: 24
                          201.251.123.0/24 maxlen: 24
                          201.251.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 02:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ee:5f:87:2e:4b:10:27:09:5d:c5:ef:bd:f5:0a:38:aa:1f:3a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Sep 30 17:32:31 2026 GMT
            Not After : Sep 29 17:37:31 2027 GMT
        Subject: CN=AFB6D98B075B4203AC9F4BD7559180BA117E34ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:ac:4a:f9:5c:0b:54:03:7f:37:83:b4:57:
                    32:ce:af:3a:77:a9:e3:02:ab:08:f5:2c:84:3f:e7:
                    eb:77:d4:a1:49:68:fb:63:66:a5:66:dc:9c:ae:4a:
                    75:4a:ca:8d:7a:0b:18:b9:55:88:f1:ac:da:5d:55:
                    87:4b:f9:b5:bd:05:cc:10:33:c9:2a:df:46:e6:4a:
                    4c:90:da:df:fe:5c:08:16:7a:af:e9:25:5b:7a:76:
                    27:66:b5:6c:bd:26:81:08:0a:cd:e7:e7:b4:50:35:
                    43:50:b9:87:88:3f:01:ff:63:60:8a:1a:61:94:50:
                    ba:07:18:13:97:d0:a9:3f:b1:13:9b:2f:90:de:7a:
                    a4:b9:4e:67:a5:d0:05:06:99:79:75:c8:af:c2:2e:
                    62:46:b7:14:3f:01:99:af:85:1f:5e:42:92:96:8a:
                    66:87:d2:8b:0d:eb:f7:e3:ef:e1:54:55:3d:35:8a:
                    47:e8:bc:3e:d4:87:c7:b0:b3:55:09:4f:ab:d4:b9:
                    cc:da:79:02:da:67:78:67:c6:0d:8a:cf:a6:8a:b3:
                    a4:0e:14:40:99:06:02:6c:3e:ea:90:ce:62:fd:ed:
                    9d:6e:48:4d:f3:c7:2a:da:32:e6:ab:ad:86:2e:92:
                    2a:01:67:fa:46:23:b1:4d:f3:c0:91:62:81:10:d9:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B6:D9:8B:07:5B:42:03:AC:9F:4B:D7:55:91:80:BA:11:7E:34:ED
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.37.0/24
                  186.38.105.0/24
                  186.56.67.128/25
                  186.56.97.0/24
                  201.251.48.0/24
                  201.251.123.0/24
                  201.251.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:1d:3a:91:fa:b5:62:8e:11:48:7e:79:03:ab:47:46:62:a7:
         a5:b0:a8:6b:0e:51:22:61:e4:9e:32:60:62:54:ee:8b:ff:54:
         ad:cb:15:18:05:6a:f0:7f:1c:88:b7:0a:26:3e:ce:24:66:14:
         73:fe:87:30:04:4f:df:e6:e4:c7:b5:bc:3a:67:db:5e:56:b4:
         b8:9b:32:ba:fd:90:17:44:15:6c:f5:c1:20:2b:f4:51:e7:21:
         c2:ee:a8:c6:7e:84:ef:02:84:7b:e1:8d:52:b9:bc:a5:78:bb:
         21:7e:6d:d0:e6:84:29:19:44:b1:64:fa:8b:3b:34:98:9a:89:
         fe:e7:f0:af:c9:0e:a7:f5:6a:a7:b1:a3:5c:0d:d2:50:42:94:
         7f:92:0c:5a:83:64:63:7b:b9:fb:f2:80:84:f7:01:e8:0b:51:
         a5:7e:e0:32:ca:23:00:9f:44:bd:e3:e4:94:4b:3c:a5:87:37:
         38:78:aa:f4:57:7a:b7:8f:88:73:47:fb:eb:30:7e:0f:46:47:
         d8:d0:15:a7:c9:88:9b:e3:ae:a9:a2:2e:0d:63:38:b1:26:a2:
         50:31:39:64:e3:8d:cd:f0:b7:5a:29:d6:fd:b4:e9:09:d3:27:
         00:9b:e3:62:1c:8c:6e:be:5f:0b:81:79:57:2f:bb:25:97:fe:
         65:05:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:54:38 2026 by rpki-client